CVE-2019-15708
CVE-2019-15708
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Mar 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
Affected products
Fortinet · Fortinet FortiAPFortinet · Fortinet FortiAP-S/W2Fortinet · Fortinet FortiAP-UWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →